
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier: L1PlbqsqEn0538pEpslLv2/6oMEqIT/BfC+KKws1kos=
Subject key identifier: 2E:B9:C5:C4:DB:37:B8:3A:FE:0A:52:81:92:D0:44:34:6B:84:A8:CB
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial: 1C81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number: 1C60
Signing time: Mon 02 Mar 2026 03:14:16 +0000
Manifest this update: Mon 02 Mar 2026 03:14:15 +0000
Manifest next update: Mon 09 Mar 2026 03:14:15 +0000
Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: k13B8jr/sptrXH6AHXVviENrYIgTd+BUrmV+0z8kCPg=)
2: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: 4sqBlimKSSRcLEJYHzC9lXGcwmgJfjeElM5emE+DpWM=)
3: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: YLtYPR1AHAtKAbo/zrzvsVV3rqIKAYuYvXhX3mgSt9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7297 (0x1c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Validity
Not Before: Mar 2 03:14:15 2026 GMT
Not After : Mar 9 03:14:15 2026 GMT
Subject: CN=69a50088-f982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:31:6b:6a:68:b8:d0:e8:c5:d2:d2:40:46:
38:a2:fd:bf:2e:2c:b4:8d:53:99:cb:5c:62:54:5d:
92:29:0f:e9:a1:d9:49:06:02:96:1f:f2:48:31:a7:
39:0e:8c:a7:f3:17:7e:55:4d:a2:f0:a8:47:9a:ce:
2f:99:a7:22:c3:a8:97:f0:09:dc:45:f3:62:12:f9:
25:e3:9a:f3:74:e8:5c:85:05:09:76:f8:b5:67:00:
e6:09:69:40:f0:e7:49:9d:5d:07:17:b3:48:da:74:
73:e5:fb:ae:27:a1:4f:05:74:5b:72:54:c2:bb:6b:
9f:35:3d:b0:6c:36:1b:de:bf:72:40:66:bb:c4:9d:
82:01:19:06:61:1f:fe:93:39:72:dc:28:de:3e:5c:
80:55:b5:9d:fb:76:a5:a8:68:f6:83:44:ef:67:78:
7e:82:5e:39:f0:14:0d:dd:09:bf:d2:12:48:3c:45:
67:a3:b2:99:bb:36:3e:fa:1b:ad:81:6b:13:1c:8c:
5b:54:ec:93:f5:e4:32:f2:89:61:27:1a:15:c2:38:
28:b1:a2:76:cf:5b:1c:bb:4f:37:6e:4c:c2:f6:4d:
6f:8e:b9:2b:fa:92:37:ee:c9:46:3c:15:7d:3b:f9:
b5:49:86:7f:4e:02:c4:30:27:6e:b4:73:9f:18:0c:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:C5:C4:DB:37:B8:3A:FE:0A:52:81:92:D0:44:34:6B:84:A8:CB
X509v3 Authority Key Identifier:
keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:90:9d:99:c3:8e:63:f7:e8:f6:57:85:19:93:93:a4:75:
8a:e5:c5:30:35:9a:5c:06:8b:9d:d3:03:15:a7:32:eb:f3:0d:
51:aa:e2:b2:2c:1d:86:d4:6d:00:a6:bf:c8:38:af:38:1b:52:
fa:76:f2:c2:99:a9:9e:c1:84:ff:c7:b6:a8:a8:f7:86:a0:2e:
a0:c5:95:37:97:15:bd:ff:e0:79:29:bf:60:7d:83:44:87:93:
33:49:9a:1b:7e:8f:c9:a1:39:4f:3f:2e:12:09:34:f5:86:5a:
66:27:c4:d0:67:94:ac:39:7c:5b:72:e2:1f:d4:e6:bc:53:aa:
6b:86:4b:2b:00:36:fb:e7:d0:26:cd:5d:1f:19:46:2b:a4:8d:
b6:e3:a4:9b:73:8d:c7:f6:be:aa:5d:0d:31:7a:25:5b:1f:ba:
5f:a6:7b:88:b8:87:e8:06:3a:cd:d4:b7:ab:ec:ed:f1:ad:b1:
bf:2d:6e:07:22:a3:09:d8:43:34:38:aa:50:cd:9d:20:ef:dc:
a3:50:9e:d7:f3:ce:f6:dd:71:b4:54:01:93:23:4f:d0:3c:81:
96:aa:26:c4:25:19:2c:67:d3:78:8a:7b:33:b8:6a:bf:21:2c:
8b:cb:f5:e4:19:e3:32:8b:c6:e4:36:2f:50:f5:bf:aa:5e:a8:
38:30:1a:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy
RUFDODJDQUYwHhcNMjYwMzAyMDMxNDE1WhcNMjYwMzA5MDMxNDE1WjAYMRYwFAYD
VQQDEw02OWE1MDA4OC1mOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Wkxa2pouNDoxdLSQEY4ov2/Liy0jVOZy1xiVF2SKQ/podlJBgKWH/JIMac5
Doyn8xd+VU2i8KhHms4vmaciw6iX8AncRfNiEvkl45rzdOhchQUJdvi1ZwDmCWlA
8OdJnV0HF7NI2nRz5fuuJ6FPBXRbclTCu2ufNT2wbDYb3r9yQGa7xJ2CARkGYR/+
kzly3CjePlyAVbWd+3alqGj2g0TvZ3h+gl458BQN3Qm/0hJIPEVno7KZuzY++hut
gWsTHIxbVOyT9eQy8olhJxoVwjgosaJ2z1scu083bkzC9k1vjrkr+pI37slGPBV9
O/m1SYZ/TgLEMCdutHOfGAzHWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC65xcTb
N7g6/gpSgZLQRDRrhKjLMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5
QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla
WXJNbF90aF9rd3d1cklMSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkdiQnZnDjmP36PZXhRmTk6R1iuXFMDWaXAaLndMDFacy6/MNUarisiwdhtRt
AKa/yDivOBtS+nbywpmpnsGE/8e2qKj3hqAuoMWVN5cVvf/geSm/YH2DRIeTM0ma
G36PyaE5Tz8uEgk09YZaZifE0GeUrDl8W3LiH9TmvFOqa4ZLKwA2++fQJs1dHxlG
K6SNtuOkm3ONx/a+ql0NMXolWx+6X6Z7iLiH6AY6zdS3q+zt8a2xvy1uByKjCdhD
NDiqUM2dIO/co1Ce1/PO9t1xtFQBkyNP0DyBlqomxCUZLGfTeIp7M7hqvyEsi8v1
5BnjMovG5DYvUPW/ql6oODAa+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:46 2026 by rpki-client